Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/aOll2yIzGlTioL_5KcotM1hRg6I.roa
File: aOll2yIzGlTioL_5KcotM1hRg6I.roa (raw, json)
Hash identifier: WjZYWFwSah/T1ngfGN/4LLm1yrnATZDAMq581306uVg=
Subject key identifier: 68:E9:65:DB:22:33:1A:54:E2:A0:BF:F9:29:CA:2D:33:58:51:83:A2
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A00FF5946968F6B3F7A15B52410C66B576
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/aOll2yIzGlTioL_5KcotM1hRg6I.roa
Signing time: Mon 17 Aug 2026 13:42:27 +0000
ROA not before: Mon 17 Aug 2026 13:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.117.53.0/24 maxlen: 24
45.123.145.0/24 maxlen: 24
72.63.110.0/23 maxlen: 23
189.81.0.0/23 maxlen: 23
189.81.16.0/23 maxlen: 23
189.81.26.0/23 maxlen: 23
189.81.30.0/23 maxlen: 23
189.81.32.0/23 maxlen: 23
189.81.60.0/23 maxlen: 23
189.81.68.0/23 maxlen: 23
189.81.104.0/23 maxlen: 23
189.81.112.0/23 maxlen: 23
189.81.120.0/23 maxlen: 23
189.81.122.0/23 maxlen: 23
189.81.130.0/23 maxlen: 23
189.81.132.0/23 maxlen: 23
189.81.136.0/23 maxlen: 23
189.81.140.0/23 maxlen: 23
189.81.158.0/23 maxlen: 23
189.81.160.0/23 maxlen: 23
189.81.168.0/23 maxlen: 23
189.81.194.0/23 maxlen: 23
189.81.198.0/23 maxlen: 23
189.81.202.0/23 maxlen: 23
189.81.218.0/23 maxlen: 23
189.81.226.0/23 maxlen: 23
189.81.228.0/23 maxlen: 23
189.81.232.0/23 maxlen: 23
189.104.2.0/23 maxlen: 23
189.104.8.0/23 maxlen: 23
189.104.12.0/23 maxlen: 23
189.104.14.0/23 maxlen: 23
189.104.16.0/23 maxlen: 23
189.104.22.0/23 maxlen: 23
189.104.30.0/23 maxlen: 23
189.104.32.0/23 maxlen: 23
189.104.48.0/23 maxlen: 23
189.104.56.0/23 maxlen: 23
189.104.60.0/23 maxlen: 23
189.104.64.0/23 maxlen: 23
189.104.74.0/23 maxlen: 23
189.104.94.0/23 maxlen: 23
189.104.96.0/23 maxlen: 23
189.104.98.0/23 maxlen: 23
189.104.106.0/23 maxlen: 23
189.104.112.0/23 maxlen: 23
189.104.114.0/23 maxlen: 23
189.104.120.0/23 maxlen: 23
189.104.122.0/23 maxlen: 23
189.104.126.0/23 maxlen: 23
189.104.130.0/23 maxlen: 23
189.104.138.0/23 maxlen: 23
189.104.144.0/23 maxlen: 23
189.104.146.0/23 maxlen: 23
189.104.150.0/23 maxlen: 23
189.104.154.0/23 maxlen: 23
189.104.168.0/23 maxlen: 23
189.104.170.0/23 maxlen: 23
189.104.182.0/23 maxlen: 23
189.104.192.0/23 maxlen: 23
189.104.200.0/23 maxlen: 23
189.104.236.0/23 maxlen: 23
189.104.242.0/23 maxlen: 23
189.104.250.0/23 maxlen: 23
189.104.254.0/23 maxlen: 23
203.78.166.0/23 maxlen: 23
205.188.4.0/23 maxlen: 23
205.188.12.0/22 maxlen: 22
205.188.24.0/22 maxlen: 22
205.188.28.0/22 maxlen: 22
205.188.32.0/22 maxlen: 22
205.188.36.0/22 maxlen: 22
205.188.40.0/22 maxlen: 22
205.188.48.0/22 maxlen: 22
205.188.56.0/22 maxlen: 22
205.188.64.0/22 maxlen: 22
205.188.68.0/22 maxlen: 22
205.188.72.0/22 maxlen: 22
205.188.76.0/23 maxlen: 23
205.188.78.0/23 maxlen: 23
205.188.84.0/22 maxlen: 22
205.188.88.0/22 maxlen: 22
205.188.92.0/23 maxlen: 23
205.188.94.0/23 maxlen: 23
205.188.124.0/22 maxlen: 22
205.188.132.0/22 maxlen: 22
205.188.214.0/23 maxlen: 23
205.188.216.0/22 maxlen: 22
205.188.240.0/22 maxlen: 22
205.188.252.0/22 maxlen: 22
2a0d:3900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:f5:94:69:68:f6:b3:f7:a1:5b:52:41:0c:66:b5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Aug 17 13:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68e965db22331a54e2a0bff929ca2d33585183a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b8:e6:2e:22:95:ee:b5:7e:bb:10:55:e6:7c:
a4:e7:94:90:ad:74:7c:8f:f6:c6:0b:a2:de:fb:35:
22:66:89:a8:cd:62:11:6b:c5:87:96:ec:e9:e5:89:
85:2c:ba:2c:1e:fd:47:c8:c1:a2:95:6f:af:a5:2e:
d7:eb:82:f8:ff:62:b3:5e:09:fa:54:1f:0f:92:83:
e8:87:29:a8:47:e3:99:20:66:32:a5:db:bb:b4:66:
af:e9:4c:59:f7:0e:d4:a1:3f:1a:c2:ba:54:f1:a5:
b6:b5:67:6a:fb:c2:ac:57:b5:2d:2e:fe:96:93:ce:
34:fa:2c:41:96:8e:31:47:90:e8:b7:06:ca:b7:fc:
2e:87:34:d0:90:1a:d0:12:ef:3b:cb:16:a1:c1:a1:
84:b7:69:cd:ad:e8:50:08:b7:45:28:ce:92:fa:c9:
59:05:a2:21:37:70:43:38:a7:97:45:1f:86:8d:a2:
a5:82:52:52:0a:50:5d:0d:56:29:06:e8:b3:ac:a6:
10:a8:d4:ac:44:d5:30:09:a4:28:4e:2a:82:b6:b3:
1a:2f:4c:d4:e9:b2:cf:cb:70:ac:21:20:e0:54:5e:
40:cc:55:d5:a7:a0:c8:74:f5:85:a6:56:02:84:ff:
34:3c:44:15:4d:18:68:54:c4:65:6b:88:e1:2f:fb:
65:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:65:DB:22:33:1A:54:E2:A0:BF:F9:29:CA:2D:33:58:51:83:A2
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/aOll2yIzGlTioL_5KcotM1hRg6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.53.0/24
45.123.145.0/24
72.63.110.0/23
189.81.0.0/23
189.81.16.0/23
189.81.26.0/23
189.81.30.0-189.81.33.255
189.81.60.0/23
189.81.68.0/23
189.81.104.0/23
189.81.112.0/23
189.81.120.0/22
189.81.130.0-189.81.133.255
189.81.136.0/23
189.81.140.0/23
189.81.158.0-189.81.161.255
189.81.168.0/23
189.81.194.0/23
189.81.198.0/23
189.81.202.0/23
189.81.218.0/23
189.81.226.0-189.81.229.255
189.81.232.0/23
189.104.2.0/23
189.104.8.0/23
189.104.12.0-189.104.17.255
189.104.22.0/23
189.104.30.0-189.104.33.255
189.104.48.0/23
189.104.56.0/23
189.104.60.0/23
189.104.64.0/23
189.104.74.0/23
189.104.94.0-189.104.99.255
189.104.106.0/23
189.104.112.0/22
189.104.120.0/22
189.104.126.0/23
189.104.130.0/23
189.104.138.0/23
189.104.144.0/22
189.104.150.0/23
189.104.154.0/23
189.104.168.0/22
189.104.182.0/23
189.104.192.0/23
189.104.200.0/23
189.104.236.0/23
189.104.242.0/23
189.104.250.0/23
189.104.254.0/23
203.78.166.0/23
205.188.4.0/23
205.188.12.0/22
205.188.24.0-205.188.43.255
205.188.48.0/22
205.188.56.0/22
205.188.64.0/20
205.188.84.0-205.188.95.255
205.188.124.0/22
205.188.132.0/22
205.188.214.0-205.188.219.255
205.188.240.0/22
205.188.252.0/22
IPv6:
2a0d:3900::/29
Signature Algorithm: sha256WithRSAEncryption
a1:99:3e:c8:90:26:29:a8:c6:03:f7:11:c0:1a:2e:2b:93:b6:
75:4f:cb:6c:d3:56:05:51:22:b7:20:8c:02:5e:bb:13:63:15:
04:65:52:a9:e1:7e:9b:2a:18:7f:7d:e5:25:7e:f4:b8:b0:24:
ad:82:ad:fd:30:42:31:23:d2:3c:38:31:13:43:2d:a9:bc:9d:
59:b2:e7:3e:9b:15:34:0b:34:a0:c5:49:06:4e:de:e6:89:50:
f0:9a:35:da:88:da:d0:26:75:46:cf:c0:73:51:45:c9:27:fe:
93:7a:e3:9c:92:66:02:fb:ed:f4:34:e6:0d:00:3b:d3:36:86:
c9:1d:bd:67:c4:d0:a3:75:55:21:07:8a:1b:23:be:24:2c:aa:
32:33:57:fe:1d:c3:6d:3c:c7:16:a5:85:4a:6d:e1:1d:b1:2b:
59:4a:1f:45:ef:f3:17:c7:a2:9c:dc:4b:86:c0:05:bc:e2:d3:
1a:d2:82:c5:65:ff:8b:ef:d3:16:04:61:55:93:0c:32:81:cf:
a7:85:8c:9c:0c:ad:c6:21:16:2b:59:49:12:d4:3f:12:4b:32:
ec:7d:ba:b8:91:4b:ee:64:ad:76:5c:d9:a0:b4:b0:21:59:d4:
2f:7c:59:45:9c:86:dc:7b:cf:08:94:4b:7b:3d:12:2c:6e:16:
9c:9f:32:f5
-----BEGIN CERTIFICATE-----
MIIG4DCCBcigAwIBAgISAaAP9ZRpaPaz96FbUkEMZrV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwODE3MTM0MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGU5NjVkYjIyMzMxYTU0ZTJhMGJmZjkyOWNhMmQzMzU4NTE4M2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rjmLiKV7rV+uxBV5nyk55SQrXR8
j/bGC6Le+zUiZomozWIRa8WHluzp5YmFLLosHv1HyMGilW+vpS7X64L4/2KzXgn6
VB8PkoPohymoR+OZIGYypdu7tGav6UxZ9w7UoT8awrpU8aW2tWdq+8KsV7UtLv6W
k840+ixBlo4xR5DotwbKt/wuhzTQkBrQEu87yxahwaGEt2nNrehQCLdFKM6S+slZ
BaIhN3BDOKeXRR+GjaKlglJSClBdDVYpBuizrKYQqNSsRNUwCaQoTiqCtrMaL0zU
6bLPy3CsISDgVF5AzFXVp6DIdPWFplYChP80PEQVTRhoVMRla4jhL/tl2QIDAQAB
o4ID7DCCA+gwHQYDVR0OBBYEFGjpZdsiMxpU4qC/+SnKLTNYUYOiMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvYU9sbDJ5SXpHbFRpb0xfNUtjb3RNMWhSZzZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICAAYIKwYBBQUHAQcBAf8EggHvMIIB6zCCAdgEAgABMIIB
0AMEAC11NQMEAC17kQMEAUg/bgMEAb1RAAMEAb1REAMEAb1RGjAMAwQBvVEeAwQB
vVEgAwQBvVE8AwQBvVFEAwQBvVFoAwQBvVFwAwQCvVF4MAwDBAG9UYIDBAG9UYQD
BAG9UYgDBAG9UYwwDAMEAb1RngMEAb1RoAMEAb1RqAMEAb1RwgMEAb1RxgMEAb1R
ygMEAb1R2jAMAwQBvVHiAwQBvVHkAwQBvVHoAwQBvWgCAwQBvWgIMAwDBAK9aAwD
BAG9aBADBAG9aBYwDAMEAb1oHgMEAb1oIAMEAb1oMAMEAb1oOAMEAb1oPAMEAb1o
QAMEAb1oSjAMAwQBvWheAwQCvWhgAwQBvWhqAwQCvWhwAwQCvWh4AwQBvWh+AwQB
vWiCAwQBvWiKAwQCvWiQAwQBvWiWAwQBvWiaAwQCvWioAwQBvWi2AwQBvWjAAwQB
vWjIAwQBvWjsAwQBvWjyAwQBvWj6AwQBvWj+AwQBy06mAwQBzbwEAwQCzbwMMAwD
BAPNvBgDBALNvCgDBALNvDADBALNvDgDBATNvEAwDAMEAs28VAMEBc28QAMEAs28
fAMEAs28hDAMAwQBzbzWAwQCzbzYAwQCzbzwAwQCzbz8MA0EAgACMAcDBQMqDTkA
MA0GCSqGSIb3DQEBCwUAA4IBAQChmT7IkCYpqMYD9xHAGi4rk7Z1T8ts01YFUSK3
IIwCXrsTYxUEZVKp4X6bKhh/feUlfvS4sCStgq39MEIxI9I8ODETQy2pvJ1Zsuc+
mxU0CzSgxUkGTt7miVDwmjXaiNrQJnVGz8BzUUXJJ/6TeuOckmYC++30NOYNADvT
NobJHb1nxNCjdVUhB4obI74kLKoyM1f+HcNtPMcWpYVKbeEdsStZSh9F7/MXx6Kc
3EuGwAW84tMa0oLFZf+L79MWBGFVkwwygc+nhYycDK3GIRYrWUkS1D8SSzLsfbq4
kUvuZK12XNmgtLAhWdQvfFlFnIbce88IlEt7PRIsbhacnzL1
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:55 2026 by rpki-client